Privacy Policy

This Privacy Policy describes how Tooth Truth Inc. ("Company," "we," "us," or "our") collects, uses, discloses, and protects information provided to us or collected through the websites, mobile applications, or digital platforms where this Privacy Policy is posted (collectively, "Platform"). We follow this Privacy Policy in accordance with applicable law in the jurisdictions in which we operate.

This Privacy Policy is separate from our Notice of Privacy Practices ("NPP"). To the extent the Company receives or handles health-related information that may be subject to privacy laws governing protected health information, such information is addressed in the NPP. This Privacy Policy applies to all other personal information collected through the Platform. Tooth Truth operates as a technology platform that connects patients with independent dental professionals. Tooth Truth does not provide dental or medical treatment. Dentists and other providers accessible through the Platform are independent healthcare providers and are solely responsible for their own clinical decisions, professional services, and compliance with applicable healthcare laws, including HIPAA and state licensing requirements.

Please keep in mind that when you provide information to us on a third-party site or platform (for example, via credit card vendor, hosting provider, or an integrated application), the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this privacy policy, and the information the third-party site or Platform collects is subject to the third-party site or platform's privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our website. Please also keep in mind that our site or communications may contain links to other sites or applications not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your Personal Information.

We collect Personal Information, including Personal Health Information, and we may use Personal Information to create a separate type of information, aggregate information which removes your identity and allows us to create statistical data. Tooth Truth does not sell personal information, personal health information, or uploaded dental records to third parties. Uploaded records and images are used solely to provide Platform functionality, including facilitating professional review and patient-provider communication. Tooth Truth does not use patient records or diagnostic images to train third-party artificial intelligence models.

For example, we collect:

• Registration information you provide when you create an account on our portal, such as your first name and surname, location of residence, gender, date of birth, email address, username, and password;
• Transaction information you provide when you purchase a product or service from us, such as your postal address, telephone number, and payment information;
• Information we obtain from a third party, such as a site or platform provider, about use of our applications on third-party platforms or devices.

We collect information you provide to us when you purchase products or services, register with us, or otherwise interact with us using one or more devices. You may provide information to us in a variety of ways, including by typing or speaking.

We collect information through a variety of technologies, such as application program interfaces, and Web beacons, including when you visit our sites.

We will not share your Personal Information with a third party, except as required or permitted by law, and your Personal Health Information will not be shared with a third party, except as is described by our HIPAA Notice of Privacy Practices Policy.

Please note that once we share your personal information with another company, the information received by the other company is controlled by that company and becomes subject to the other company's privacy practices.

When companies perform services on our behalf, like package delivery, marketing and advertising, and customer service, they may receive your personal information; however, these companies are prohibited from using your personal information for purposes other than those requested by us or required by law; and Service providers engaged by Tooth Truth, such as cloud hosting providers, analytics providers, payment processors, and communication service providers, are contractually required to maintain confidentiality and security safeguards consistent with applicable privacy laws. We may share your personal information with third parties in connection with a transaction, to enforce our Terms of Use or rules, to comply with legal process, or in other cases if we believe in good faith that disclosure is required by law.

We provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. You may contact us to exercise these options by sending an email to privacy@mytoothtruth.com. In accordance with applicable law, your controls and choices may include:

• Correcting, updating, and deleting your Registration Information
• Requesting access to the personal information we hold about you and that we amend it as stated in our HIPAA Notice of Privacy Practices Policy

Please be aware that collection of certain personal information is mandatory because of the service we provide, but we will make that clear at the point of collection so that you can make an informed decision whether to participate. If you have questions about the specific personal information about you that we process or retain, and your rights regarding that personal information, contact us at privacy@mytoothtruth.com.

We may communicate with you via email and SMS for transactional and service-related purposes, such as account notifications, scheduling, reminders, or administrative messages. SMS messages are transactional only and do not include sensitive personal health information. Privacy, data access, and compliance-related inquiries must be submitted via email to privacy@mytoothtruth.com. By providing a mobile phone number to Tooth Truth, you consent to receive transactional SMS communications related to your use of the Platform. Message frequency may vary. Message and data rates may apply. You may opt out of SMS communications at any time by replying STOP to any message. Reply HELP for assistance.

The Platform is intended for use by individuals eighteen (18) years of age or older, or by parents or legal guardians acting on behalf of a minor. We recognize the need to provide further privacy protections with respect to personal information we may collect from minors as it relates to the services provided. When we intend to collect personal information from minors, we take additional steps to protect their privacy, including:

• Notifying Parents or guardians about our information practices with regard to minors, including the types of personal information we may collect from minors, the uses to which we may put that information, and whether and with whom we may share that information;
• In accordance with applicable law, and our practices, obtaining consent from parents for the collection of personal information from their minors;
• Giving parents access or the ability to request access to personal information we have collected from their minors and the ability to request that the personal information be changed or deleted.

The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical safeguards that are designed to protect information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate technology and methods as appropriate, or as required by law. Please be aware that, despite our best efforts, no security measures are perfect. Users are responsible for maintaining the confidentiality of their account credentials and for promptly notifying Tooth Truth of any unauthorized account activity. If you believe that your information has been compromised, contact us immediately at privacy@mytoothtruth.com.

From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our sites and applications, or by other means, consistent with applicable law.

If you have a comment or question about this privacy policy, please contact us at privacy@mytoothtruth.com.